RE: Writing a comprehensive Network Policy

Chris,

Actually keeping to a 3 - 5 page policy length might possibly prohibit
the needs of the company, I wouldn't put any limitation on it.
Additionally, With the architecture, remember that it this is only
supposed to be a guideline, and not an end all be all... Example... Bad:
All routers should be Cisco 3800 with etc.... Better: All routers should
have the ability to provide full control over traffic limitation through
the use of access-lists....

Remember it's a non-technical document, that all users should be able to
understand.

Additional items to possibly add are, actions to be taken when violating
the policy, possible steps to be taken against an employee for violation
of the policy...

Wayne



-----Original Message-----
From: Chris Hammer [mailto:CHammer@xxxxxxxxx]
Sent: Wednesday, August 23, 2006 9:55 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Writing a comprehensive Network Policy


Hello,

I am currently writing a network policy for our business. I am having
trouble figuring out exactly what I should put into it while meeting
these requirements:

1.) Should be a policy and not a procedure

2.) Keep the standard 3-5 page policy length

3.) Policy should cover network architecture including: routers,
switches, hubs, firewalls, etc....

Any examples or a general idea of where to start would be appreciated!

Cheers,
CH


------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: preventing run-as option
    ... should be a policy issue. ... For example employee A is given the permission and B does not have ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: user default password checking tool
    ... The first problem to tackle in this respect is policy. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ...
    (Security-Basics)
  • RE: Writing a comprehensive Network Policy
    ... Writing a comprehensive Network Policy ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has ...
    (Security-Basics)
  • Re: Re: Network proximity warning
    ... First you have to ask yourself, what will this achieve besides advising "bad people" that they are close to a private network. ... Even better - include a agree/disagree notice on the policy to confirm which users have reviewed the policy. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: Writing a comprehensive Network Policy
    ... AUP, though you don't say what the goal of the policy is. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)